JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.163.213.6

89.163.213.6 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	WIIT AG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24961
Hostname(s)	vps2635193.fastwebserver.de
Domain Name	wiit.cloud
Country	🇩🇪 Germany
City	Essen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.163.213.6

Whois 89.163.213.6

IP Abuse Reports for 89.163.213.6:

This IP address has been reported a total of 45 times from 18 distinct sources. 89.163.213.6 was first reported on November 7th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2024-12-02 05:22:02 (1 year ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇬🇧 Swiptly	2024-12-02 00:23:09 (1 year ago)	Exim Login attempts ...	Email Spam Brute-Force
🇨🇭 zynex	2024-12-01 19:59:25 (1 year ago)	URL Probing: /.env	Web App Attack
🇺🇸 TPI-Abuse	2024-12-01 18:35:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.163.213.6 (vps2489150.fastwebserver.de): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 89.163.213.6 (vps2489150.fastwebserver.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 13:35:36.159774 2024] [security2:error] [pid 29710:tid 29710] [client 89.163.213.6:52425] [client 89.163.213.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/.env"] [unique_id "Z0yseGdXkiwG2OV8yxbXjwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-01 17:31:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.163.213.6 (vps2489150.fastwebserver.de): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 89.163.213.6 (vps2489150.fastwebserver.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 12:31:43.842522 2024] [security2:error] [pid 666:tid 666] [client 89.163.213.6:51849] [client 89.163.213.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.suralcopensioendesk.com"] [uri "/.env"] [unique_id "Z0ydf2izqCF7M0rXZ91czwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 penjaga BRIN	2024-12-01 16:11:35 (1 year ago)	apache-alfa-111	Web App Attack
🇺🇸 TPI-Abuse	2024-12-01 14:57:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.163.213.6 (vps2489150.fastwebserver.de): 1 i ... show more (mod_security) mod_security (id:210492) triggered by 89.163.213.6 (vps2489150.fastwebserver.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 09:57:43.553896 2024] [security2:error] [pid 1918931:tid 1918931] [client 89.163.213.6:58033] [client 89.163.213.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.al-ketab.net"] [uri "/.env"] [unique_id "Z0x5Z4ti_rsbLdwvgqtR6gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2024-11-26 14:17:57 (1 year ago)	Exim Login attempts ...	Email Spam Brute-Force
🇩🇪 dwmp	2024-11-26 09:18:44 (1 year ago)	Nov 26 10:18:43 webcore postfix/smtpd[1119599]: warning: vps2489150.fastwebserver.de[89.163.213.6]: ... show more Nov 26 10:18:43 webcore postfix/smtpd[1119599]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL CRAM-MD5 authentication failed: authentication failure Nov 26 10:18:43 webcore postfix/smtpd[1119599]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL PLAIN authentication failed: authentication failure Nov 26 10:18:43 webcore postfix/smtpd[1119599]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 dwmp	2024-11-25 16:18:23 (1 year ago)	Nov 25 17:18:22 webcore postfix/smtpd[618241]: warning: vps2489150.fastwebserver.de[89.163.213.6]: S ... show more Nov 25 17:18:22 webcore postfix/smtpd[618241]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL CRAM-MD5 authentication failed: authentication failure Nov 25 17:18:22 webcore postfix/smtpd[618241]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL PLAIN authentication failed: authentication failure Nov 25 17:18:22 webcore postfix/smtpd[618241]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇧 Swiptly	2024-11-25 13:32:17 (1 year ago)	Exim Login attempts ...	Email Spam Brute-Force
🇩🇪 dwmp	2024-11-25 03:28:48 (1 year ago)	Nov 25 04:28:48 webcore postfix/smtpd[194490]: warning: vps2489150.fastwebserver.de[89.163.213.6]: S ... show more Nov 25 04:28:48 webcore postfix/smtpd[194490]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL CRAM-MD5 authentication failed: authentication failure Nov 25 04:28:48 webcore postfix/smtpd[194490]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL PLAIN authentication failed: authentication failure Nov 25 04:28:48 webcore postfix/smtpd[194490]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇷 UM3	2024-11-24 17:26:00 (1 year ago)	Exim Auth Failed	Brute-Force
🇩🇪 dwmp	2024-11-22 16:11:59 (1 year ago)	Nov 22 17:11:58 webcore postfix/smtpd[2493589]: warning: vps2489150.fastwebserver.de[89.163.213.6]: ... show more Nov 22 17:11:58 webcore postfix/smtpd[2493589]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL CRAM-MD5 authentication failed: authentication failure Nov 22 17:11:58 webcore postfix/smtpd[2493589]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL PLAIN authentication failed: authentication failure Nov 22 17:11:58 webcore postfix/smtpd[2493589]: warning: vps2489150.fastwebserver.de[89.163.213.6]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 SiliSoftware	2024-11-21 23:17:56 (1 year ago)	/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.221.116.7

🇵🇱 109.205.211.29

🇳🇱 93.123.109.6

🇺🇸 91.230.168.252

🇱🇹 62.60.130.238

🇬🇧 35.203.210.75

🇺🇸 67.186.143.248

🇺🇸 66.132.224.29

🇺🇸 44.223.196.78

🇮🇪 20.13.147.55

🇬🇧 213.166.84.44

🇬🇧 193.163.125.77

🇳🇵 103.148.23.181

🇵🇰 103.74.21.41

🇩🇪 47.254.154.155

🇬🇧 35.203.210.189

🇺🇸 35.185.105.49

🇧🇷 205.210.31.207

🇧🇪 198.235.24.203

🇸🇮 176.65.134.121